agentprime: apache-software-foundation-apache-wss4jEvery new CVE for apache-software-foundation-apache-wss4j.https://agentprime.io/CVE-2026-95616: Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensionshttps://agentprime.io/advisories/CVE-2026-95616/https://agentprime.io/advisories/CVE-2026-95616/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 12:25:28 GMTCVECVE-2026-92899: Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Noncehttps://agentprime.io/advisories/CVE-2026-92899/https://agentprime.io/advisories/CVE-2026-92899/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 12:02:41 GMTCVECVE-2026-92121: Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform referencehttps://agentprime.io/advisories/CVE-2026-92121/https://agentprime.io/advisories/CVE-2026-92121/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 12:01:55 GMTCVECVE-2026-89238: Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selectionhttps://agentprime.io/advisories/CVE-2026-89238/https://agentprime.io/advisories/CVE-2026-89238/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:59:09 GMTCVEcriticalCVE-2026-88920: Apache WSS4J: SAML Sender-Vouches Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-88920/https://agentprime.io/advisories/CVE-2026-88920/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:58:00 GMTCVEcriticalCVE-2026-87830: Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.https://agentprime.io/advisories/CVE-2026-87830/https://agentprime.io/advisories/CVE-2026-87830/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:57:01 GMTCVEcriticalCVE-2026-85532: Apache WSS4J: Insufficient Validation of Derived-Key Parametershttps://agentprime.io/advisories/CVE-2026-85532/https://agentprime.io/advisories/CVE-2026-85532/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:55:53 GMTCVE